If you are embedding our root store, you need to know that we have imposed some restrictions that on certain CAs or certificates which are not encoded in certdata.txt. These are documented on a best-efforts basis.